5 ms·

Lulu is the free and open source macOS firewall (like Little Snitch)

46 points by lsllc 5y ago

Tajnymag 5y ago
Anything similar for Windows?
- dhaavi 5y ago
  We are working on something similar, it’s in Alpha and we are looking for testers: https://safing.io/portmaster/ https://safing.io/portmaster/
  - chovybizzass 5y ago
    Is there an aur package for arch?
stalkingvictim 5y ago
With all due respect to the geniuses behind this, the architecture of computers is fundamentally broken such that trusting any firewall that runs on the same machine that it's protecting cannot be trusted. This opens up the bigger open question about suitable pathways forward for revamping computer hardware architecture from a security-first perspective, which opens up questions about the flaws of the design of the internet itself. Thusly, I will leave quietly, in recognition that the status quo is too entrenched for any visionary who has an intersect to share with humanity. Aloha and Farewell. (ps: This comment is likely to be censored by hn.)
chovybizzass 5y ago
Anything similar for Linux?
kalaracey 5y ago
What are the advantages of Lulu over Little Snitch?
- amrox 5y ago
  It’s free (it’s right in the title)
  - okamiueru 5y ago
    The information that little snitch is not free, is however, not in the title, it even implies it is. Probably why they asked the question.
    - lsllc 5y ago
      Yeah, I see that. My intention was "it's a macOS firewall (like little snitch)", not that it was "free and open source (like little snitch)". Apologies, but I can't edit the title anymore.
      - okamiueru 5y ago
        No worries. I didn't object to the title, so much as to the parent comment that suggested the original question was something that should have been obvious from the title, when it was not.
watersb 5y ago
Objective-See is great stuff. I threw a tiny amount of money at them via Patreon (IIRC). BlockBlock is a thing like "Little Snitch for kernel extensions" -- if a process tries to install a kernel extension, it is blocked until you approve the action via an alert. It is in the process of being reworked for macOS Monterey, but I've used BlockBlock on macOS 10.11 up to Big Sur and it does the job.

46 points by lsllc 5y ago

Tajnymag 5y ago

Anything similar for Windows?

dhaavi 5y ago
We are working on something similar, it’s in Alpha and we are looking for testers: https://safing.io/portmaster/ https://safing.io/portmaster/
- chovybizzass 5y ago
  Is there an aur package for arch?

stalkingvictim 5y ago

With all due respect to the geniuses behind this, the architecture of computers is fundamentally broken such that trusting any firewall that runs on the same machine that it's protecting cannot be trusted. This opens up the bigger open question about suitable pathways forward for revamping computer hardware architecture from a security-first perspective, which opens up questions about the flaws of the design of the internet itself. Thusly, I will leave quietly, in recognition that the status quo is too entrenched for any visionary who has an intersect to share with humanity. Aloha and Farewell. (ps: This comment is likely to be censored by hn.)

chovybizzass 5y ago

Anything similar for Linux?

kalaracey 5y ago

What are the advantages of Lulu over Little Snitch?

amrox 5y ago
It’s free (it’s right in the title)
- okamiueru 5y ago
  The information that little snitch is not free, is however, not in the title, it even implies it is. Probably why they asked the question.
  - lsllc 5y ago
    Yeah, I see that. My intention was "it's a macOS firewall (like little snitch)", not that it was "free and open source (like little snitch)". Apologies, but I can't edit the title anymore.
    - okamiueru 5y ago
      No worries. I didn't object to the title, so much as to the parent comment that suggested the original question was something that should have been obvious from the title, when it was not.

watersb 5y ago

Objective-See is great stuff. I threw a tiny amount of money at them via Patreon (IIRC). BlockBlock is a thing like "Little Snitch for kernel extensions" -- if a process tries to install a kernel extension, it is blocked until you approve the action via an alert. It is in the process of being reworked for macOS Monterey, but I've used BlockBlock on macOS 10.11 up to Big Sur and it does the job.